CVE-2025-66556

Published December 5th, 2025

View on NVD ↗

CVSS v3

3.5

LOW

CVSS v2

N/A

Affected

PROJECTS

Description

Nextcloud talk is a video & audio conferencing app for Nextcloud. Prior to 20.1.8 and 21.1.2, a participant with chat permissions was able to delete poll drafts of other participants within the conversation based on their numeric ID. This vulnerability is fixed in 20.1.8 and 21.1.2.

nextcloud/spreed

🗨️ Nextcloud Talk – chat, video & audio calls for Nextcloud

GitHub

2.14K

nextcloud/security-advisories

👮 Security advisories of Nextcloud

GitHub